Paddle MCP Server: Tools, Setup and Security

The Paddle MCP server lets an AI app manage your Paddle Billing account. It covers products, prices, discounts, customers, transactions, subscriptions, adjustments and reports. Paddle publishes it as an open-source package you run locally.

Checked against: Paddle's MCP server README on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

The README lists tools by resource. A sample:

• Products and prices: list_products, create_product, get_product, update_product, list_prices, create_price, update_price, preview_prices.
• Discounts: list_discounts, create_discount, update_discount, plus discount group tools such as archive_discount_group.
• Customers: list_customers, create_customer, get_customer, update_customer, list_credit_balances, plus address and business tools.
• Transactions: list_transactions, create_transaction, update_transaction, preview_transaction_create, revise_transaction, get_transaction_invoice.
• Adjustments: list_adjustments, create_adjustment, get_adjustment_credit_note.
• Subscriptions: list_subscriptions, get_subscription, update_subscription, cancel_subscription, pause_subscription, resume_subscription, activate_subscription, preview_subscription_update, create_subscription_charge, preview_subscription_charge.
• Saved payment methods: list_saved_payment_methods, get_saved_payment_method, delete_saved_payment_method.
• Other groups: customer portal sessions, notification settings, events, notifications, simulations, reports and client-side tokens.

Each tool row in the README says whether it is non-destructive and whether it is read-only.

How to connect it

Create an API key in Paddle > Developer tools > Authentication. Paddle has separate sandbox and live dashboards for this.

Then add the server to your client. Paddle's recommended config for npx:

{
  "mcpServers": {
    "paddle": {
      "command": "npx",
      "args": [
        "-y",
        "@paddle/paddle-mcp",
        "--api-key=your_api_key",
        "--environment=sandbox",
        "--tools=non-destructive"
      ]
    }
  }
}

You can also pass PADDLE_API_KEY, PADDLE_ENVIRONMENT and PADDLE_MCP_TOOLS as environment variables. Paddle offers one-click install links for Cursor and VS Code, and points to setup guides for Claude Desktop, Cursor and Windsurf (now Devin Desktop).

The --tools value accepts:

• all: every tool.
• read-only: read operations only.
• non-destructive: reads plus safe writes (the default).
• A comma-separated list of tool names, such as list_products,get_product,create_product.

Security notes

• Destructive tools. Paddle marks tools such as cancel_subscription, pause_subscription, update_transaction, revise_transaction and delete_saved_payment_method as not non-destructive. They are excluded under the default filter.
• Money-related writes still allowed by default. The non-destructive set includes create_transaction, create_adjustment and create_subscription_charge. These are labeled safe because they add records, but they still bill or credit customers. Use read-only or an explicit list if you only need reporting.
• No documented approval step. The README does not describe server-side human confirmation. Keep your client's tool approvals on.
• Sandbox first. Start with --environment=sandbox and a sandbox key.
• Key in config. The recommended config puts the API key in the args. Keep that file private. See secrets and credential leakage in MCP.
• What the spec says. The MCP tools specification says there SHOULD always be a human in the loop who can deny tool calls. The spec's security best practices also recommend scope minimization.

More guidance is in the MCP security center and excessive permissions in MCP servers.

Alternatives

• Stripe MCP server: remote, with OAuth and server-side approval for refunds.
• Chargebee MCP server: hosted subscription billing data lookups.
• Razorpay MCP server: remote or local, with a read-only flag.

Next step

Paddle's tool labels make it easy to start with read-only for revenue and churn questions. When you are ready for writes, list the exact tools by name. Our MCP readiness audit can help you pick them. See more in the MCP server directory.

Frequently asked questions